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DETAILED ACTION 

1. Claims 10-11, 13-14,16-17 and 19 have been cancelled. 

2. Claims 4-6 have been amended. 

3. Claims 1-9,12,15, and 18 are pending. 

Information Disclosure Statement 

4. The Information Disclosure Statement respectfully submitted on 01 December 
2006 has been considered by the Examiner. 

Response to Arguments 

5. Applicant's arguments filed 14 March 2007 have been fully considered and they 
are persuasive. 

Allowable Subject Matter 

6. Claims 1-9,12,15, and 18 are allowed. 

7. The following is an examiner's statement of reasons for allowance: The present 
invention is directed towards a method and system for managing identification in a data 
communications network wherein receiving a user-controlled secure storage device and 
enrolling the user with an authority network site. Claims 1 ,2,4,5,7, and 8 identifies the 
uniquely distinct features "receiving a portable user-controlled secure storage 
device; enrolling a user of said portable user-controlled secure storage device 
with an authority network site, said enrolling comprising providing information 



Application/Control Number: 10/040,293 Page 3 

Art Unit: 2137 

requested by said authority network site; receiving user data in response to said 
enrolling; storing said user data in said portable user-controlled secure storage 
device; enabling said portable user-controlled secure storage device to release 
said user data; and using said user data, from said portable user-controlled 
secure storage device, at a service provider network site to obtain a service". 
Claims 3,6, and 9 identifies the uniquely distinct features "presenting an identity 
credential request and data to be stored to a federated identity server via a client 
host; receiving an identity credential in response to said identity credential 
request, said identity credential comprising a randomized ID and an identification 
authority ID, said federated identity server capable of verifying the truthfulness, 
accuracy and completeness of said data to be stored; presenting a service 
request and said identity credential to a service portal, said service portal 
configured to issue an authentication request to said federated identity server; 
receiving a logon credential in response to said service request, said login 
credential comprising an indication of the client host used by the user; and using 
said logon credential to obtain a service from a service provider accessible via 
said service portal". Claims 12,15, and 18 identifies the uniquely distinct features 
"storing user logon information for at least one service provider server on a 
portable user-controlled secure device, said at least one service provider server 
comprising at least one network server that is capable of providing a service to a 
user; and logging on to said portable user-controlled secure device, said logging 
on providing access to said at least one service provider server". 



Application/Control Number: 10/040,293 Page 4 

Art Unit: 2137 

The closest prior art, Wu et al. (2002/0120864) discloses an automatable secure 
submission of confidential user information over a computer network using a repository 
server system supports one-click retrieval of user data over a communications network 
in fulfillment of the data requirements of a Web page form served to a user computer 
system by a Web page server. The repository server system includes a data store that 
stores user data. The repository server system provides the Web page form with a 
clickable user interface control to the user computer system. The control encompasses 
a user data request, issuable by the user computer system and that corresponds to the 
Web page form. The repository server system is responsive to the user data request to 
provide a user data response, corresponding to the user data request, to the user 
computer system. However, either singularly or in combination, Wu et al. fail to 
anticipate or render the claimed limitation of a portable user-controlled secure storage 
device, wherein the federated identity server is capable of verifying the truthfulness, 
accuracy and completeness of the data to be stored. 

The closest prior art, Kells et al. (US Patent No. 5,768,504) discloses a system 
wide sign-on capability in a distributed computing environment (DCE) is provided. 
Acquired distributed computing environment credentials are usable by any 
process/window on a desktop. DCE logon application programming interfaces create 
and recognize the presence of a credentials cache capable of being used by DCE 
processes in the system. System wide logon occurs whenever the logon API is invoked 
with the environment variable set. This API is called as a result of the system logon 
option having been selected. The API updates a global variable with the name of the 
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credentials cache. A process variable is set to the global value by initialization logic for 
all subsequently invoked applications. As a result, any calls made by these application 
will acquire the credentials identified by the variable. However, either singularly or in 
combination, Kells et al. fail to anticipate or render the claimed limitation of a portable 
user-controlled secure storage device, wherein the federated identity server is capable 
of verifying the truthfulness, accuracy and completeness of the data to be stored. 

The closest prior art, V.Samar (Single Sign-On Using Cookies for Web 
Applications) discloses a cookie based single sign-on architecture analyzing cookie 
security issues within a PKI, Kerberos, or password-stored web application. However, 
either singularly or in combination, V.Samar fail to anticipate or render the claimed 
limitation of a portable user-controlled secure storage device, wherein the federated 
identity server is capable of verifying the truthfulness, accuracy and completeness of the 
data to be stored. 

The closest prior art, Ming-Chuan et al. (Encoded Bitmap Indexing for Data 
Warehouses) discloses an encoded bitmap indexing for data warehouses method 
wherein the data warehouses improves the performance of known bitmap indexing. 
However, either singularly or in combination, Ming-Chuan et al. fail to anticipate or 
render the claimed limitation of a portable user-controlled secure storage device, 
wherein the federated identity server is capable of verifying the truthfulness, accuracy 
and completeness of the data to be stored. 

8. Therefore, claims 1-9, 12, 15, and 18 are in condition for allowance. 
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Conclusion 

Any comments considered necessary by applicant must be submitted no later 
than the payment of the issue fee and, to avoid processing delays, should preferably 
accompany the issue fee. Such submissions should be clearly labeled "Comments on 
Statement of Reasons for Allowance." 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Courtney D. Fields whose telephone number is 571- 
272-3871. The examiner can normally be reached on Mon - Thurs. 6:00 - 4:00 pm; off 
every Friday. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Emmanuel Moise can be reached on 571-272-3865. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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